Enable connection timeouts when mirrors are available

Closes #21623.
hwloc: use regular cairo dep

We don't use the symbol form for cairo anymore (and in fact, it is
turned into a regular dep for compatibility).